Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
File:                     zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json)
Hash identifier:          xREE0QNGfzvtDuqYXL7yEGhKt7LNv6xCTPkGpdjEMYg=
Subject key identifier:   3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       0107
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
Manifest number:          22EF
Signing time:             Thu 08 Oct 2026 21:15:58 +0000
Manifest this update:     Thu 08 Oct 2026 21:15:58 +0000
Manifest next update:     Sat 07 Nov 2026 21:15:58 +0000
Files and hashes:         1: 15ZNjrMxqF4avRnpoUtSuq8RbBI.roa (hash: 9zpKJqb+oYLZZG4dMt8sObzuDVlZZt6NcTo4z9jcQ1Q=)
                          2: 2drO1Z2SrgoLMqnncCcYIuySgJc.roa (hash: wiZHUkoUQcHGufxCfVqmxOKcby3563m71geiIH6b9CE=)
                          3: 8gKizuTlBC5aI6gtWXXUBVG8jPo.roa (hash: onXv+XbjW5XekEIZEQNt4hPXLBsBHa9IX9VIUtgWOx0=)
                          4: 8r9aPdxqevAQOQALCdOQEOufdd4.roa (hash: pwwu1/zKhgeiBbYPvqSMy01hqyD9L9zxhczQzDGhzYg=)
                          5: BuSW3lJNbwXMO8JofHHJNeG67Fc.roa (hash: czDMH6zXuJrRleoZGsrKRIiQzz4wvI/V+I83E9Z+yEA=)
                          6: IbJTF01oFKcrKDNjwXcyzhsHubY.roa (hash: na4PvuIaTHpJ5Pz3d1z0ZqJeMafNlo7LNksgK8eFQH8=)
                          7: PhmfQevVT8fJOneBUPbPW2RhrVc.roa (hash: XPIio0c1h9ossQ5YEOT4vjq0lRi8/O0DPW1ysk91Y6c=)
                          8: R6TF_jDMlQzSRIBXJNBf6ZWfPN4.roa (hash: 9n8lGrGOUcy4l01HLWb+xbUwvD9U5jbI/xviSqm5STs=)
                          9: RNbsb0qpu3SF3fs1XWjXAOEgPTs.roa (hash: tAL3bs2X+81SsJUKgKIHiu4qULoV70ZxQ1vvh2qMlho=)
                          10: SdB7JnvXjQrmw3jZJLDe4G3fq5w.roa (hash: 75BSh6+Cdov5JlV0eutT83syyf7GxpfxR0Pp3xCnR6Y=)
                          11: aEhG3cgrnFMzy2p1hiLStvbN6F8.roa (hash: dS4WJipaVruo9DFNdidgN8R9JbM80gtRiPQpOuy468U=)
                          12: b59fNcieMFQyMckohlK2zOadA_k.roa (hash: 29uTaxGLLxXpWbzs8w/k9Slb+iXgQHAKpCC0FW+s1Kk=)
                          13: e-XeVgp-oGkKvtTzfYFrgbBLFkM.roa (hash: V/eyD/EY5hAIX90SeRs0wZMUr24IKB71E54R1bWLF8s=)
                          14: yucz_63nIbTORoDSKpA7MK8UCSI.roa (hash: yF/8kRyUjoQfu7kyz59UwO2bjkYDLZfLDuHwh7pDmtU=)
                          15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: cvJAEh79tlFb9GXAYyY0/eKtlaNv+fNydQhVL4ijZ0s=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Sep 15 01:35:59 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0:
                    33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28:
                    a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4:
                    77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf:
                    2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38:
                    80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82:
                    34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d:
                    32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c:
                    83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0:
                    26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67:
                    21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6:
                    86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97:
                    f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73:
                    62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71:
                    51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d:
                    15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b:
                    d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:37:0a:ae:32:fa:d9:1a:59:40:5e:86:71:17:13:b7:1e:07:
         b2:5a:82:63:37:35:c7:f9:a3:1a:40:75:15:31:df:81:44:17:
         86:90:b7:dc:9e:8f:d0:90:4a:0b:55:91:56:b9:11:f8:2b:e7:
         06:fd:17:66:1f:80:55:a4:b4:21:74:3c:0d:e4:3d:ac:2c:a1:
         12:e5:0c:d4:7f:d5:9b:be:e8:c3:47:b7:16:f4:58:b4:36:d8:
         d7:a1:13:67:25:ab:54:e6:e4:76:06:a6:03:d2:50:ae:c8:2a:
         ee:f6:e0:21:ff:b0:ef:09:0e:c2:61:7d:f0:eb:14:1d:1d:bf:
         e6:e5:a5:2b:70:b5:de:a4:d5:6a:63:43:32:b8:6b:ed:2c:dd:
         d1:ca:a4:7d:ad:e9:f4:0b:4f:83:c1:69:45:bc:71:c8:64:27:
         00:60:28:3a:be:74:a5:7a:a2:41:00:62:b8:b1:f0:d9:45:44:
         bf:ab:db:27:3c:aa:60:f4:2d:4d:20:d3:7e:48:51:4c:5b:c0:
         04:ce:73:e1:09:75:d3:48:ce:92:9a:5d:ec:ae:f3:64:e7:54:
         16:46:85:33:da:a9:5e:93:e9:f8:78:59:ea:33:de:23:6c:f9:
         93:4e:db:78:b9:42:1f:6a:be:0f:e5:b5:31:e5:ce:81:2d:01:
         57:7a:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:55:06 2026 by rpki-client